IP: 5.5.5.5 is not in the cert's list #1

Nytt Ärende

Ghost · 2021-07-27T15:36:28Z

Ghost kommenterad

2021-07-27 15:36:28 +00:00

Getting this error
Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: IP: 5.5.5.5 is not in the cert's list:

Added -addext "subjectAltName=IP:5.5.5.5" to openssl req in https://git.coolaj86.com/coolaj86/nodejs-self-signed-certificate-example/src/branch/master/make-root-ca-and-certificates.sh Still getting same error

Getting this error `Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: IP: 5.5.5.5 is not in the cert's list: ` Added `-addext "subjectAltName=IP:5.5.5.5"` to `openssl req` in https://git.coolaj86.com/coolaj86/nodejs-self-signed-certificate-example/src/branch/master/make-root-ca-and-certificates.sh Still getting same error

Ghost kommenterad

2021-07-27 16:23:14 +00:00

It worked. had to add the below in client nodejs code

checkServerIdentity: function (host, cert) {
  return undefined;
}

It worked. had to add the below in client nodejs code ``` checkServerIdentity: function (host, cert) { return undefined; } ```

coolaj86 kommenterad

2021-07-27 19:10:19 +00:00

Ägare

That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate.

You disabled SSL, essentially.

That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate. You disabled SSL, essentially.

Ghost kommenterad

2021-07-28 16:52:58 +00:00

That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate.

You disabled SSL, essentially.

So the below code almost disables SSL?

checkServerIdentity: function (host, cert) {
  return undefined;
}

Why do I get IP is not in the cert's list error although I did add -addext "subjectAltName=IP:5.5.5.5 ?

> That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate. > > You disabled SSL, essentially. So the below code almost disables SSL? ``` checkServerIdentity: function (host, cert) { return undefined; } ``` Why do I get IP is not in the cert's list error although I did add -`addext "subjectAltName=IP:5.5.5.5` ?

Logga in för att delta i denna konversation.

2 Deltagare

Notiser

Förfallodatum

Inget förfallodatum satt.

Beroenden

No dependencies set.

Reference: coolaj86/nodejs-self-signed-certificate-example#1